VDB
JLSEC-2026-18
JLSEC-2026-18
PUBLISHED
CVSS 4.300000190734863 MEDIUM
GNU patch through 2.7.6 contains a free(`p_line`[`p_end`]) Double Free vulnerability in the function `another_hunk` in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | patch_jll | 0 |
| Julia | patch_jll | 0, 0 |
Timeline
- Mar 31, 2026 CVE Published
- Jul 25, 2026 CVE Updated